NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC ×32 · 1 read

CVE-2026-54121

CVSS 3.1: 8.8 high
EPSS: <1%p56
Published: Jul 14, 2026 · Jul 14, 2026
Modified: Jul 21, 2026

Analyze CVE-2026-54121 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft

Products: windows 10 1607, windows 10 1809, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2025

Weakness: CWE-285

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

5 stories

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net SecurityAug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121 CVE-2026-63077 CVE-2026-20316+12 · 2 reads

60

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

The Hacker NewsJul 28, 05:26 UTC · Jul 28, 2026Exploit / PoCExploitedCVE-2026-16232 CVE-2025-66376 CVE-2026-54121+521 · 1 read

60

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

The Hacker NewsJul 28, 04:01 UTC · Jul 28, 2026Exploit / PoCExploitedCVE-2026-541214 · 1 read

60

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

Help Net SecurityJul 27, 00:00 UTC · Jul 27, 2026Exploit / PoCCVE-2026-541217 · 3 reads

60

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJul 15, 14:52 UTC · Jul 15, 2026VulnerabilityExploitedCVE-2026-56155 CVE-2026-56164 CVE-2026-50370+892 · 1 read

60